Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          VsTIQT6YS6WAg2FJYP4yIeZWiZY+Y2K9xd2UolSg6ew=
Subject key identifier:   3F:7A:60:71:D1:ED:05:19:0B:A5:24:54:03:1A:C6:3B:AA:82:B1:F1
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       01906C73F31795EF1FFFE4215803708D7F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          0CC3
Signing time:             Mon 01 Jul 2024 04:00:56 +0000
Manifest this update:     Mon 01 Jul 2024 04:00:56 +0000
Manifest next update:     Tue 02 Jul 2024 04:00:56 +0000
Files and hashes:         1: 3Ufhxv-mkVX644a0bVfon065Uic.roa (hash: rXzqA3tq4H6G/lApyCy/VDMkaYnmmNQrAu1e6s9Yy3s=)
                          2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: 9o/Jj3wGVh84oawehbWIGhPs/tM1/b9hW4jA1vy+GCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:73:f3:17:95:ef:1f:ff:e4:21:58:03:70:8d:7f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Jul  1 04:00:56 2024 GMT
            Not After : Jul  2 04:00:56 2024 GMT
        Subject: CN=3f7a6071d1ed05190ba52454031ac63baa82b1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:01:91:83:00:2b:7b:e3:ab:64:99:a8:bf:
                    fc:85:53:ee:75:43:1b:17:b6:d9:81:d5:cf:ed:e1:
                    b5:cd:16:de:37:67:0f:a2:99:9d:03:94:70:c3:3b:
                    b3:5c:cf:f7:eb:5d:7c:51:51:23:79:de:27:61:f6:
                    b5:9b:e6:14:4e:52:42:c7:5d:7a:50:36:34:a3:18:
                    a2:ed:23:11:57:0e:58:6b:a5:f8:ec:34:5e:9f:23:
                    7f:fd:55:29:8a:54:45:ad:41:43:e9:3e:df:dd:45:
                    76:32:99:3b:df:45:e8:78:d7:a8:94:e9:6c:78:2c:
                    78:ee:fe:60:5e:6a:94:c5:50:33:f5:c4:41:be:0b:
                    86:36:5e:7e:7f:f6:ca:d2:c5:5a:9b:73:84:34:00:
                    0f:1e:4a:09:93:1f:7f:9b:f2:d7:0f:53:0e:f3:2f:
                    e7:f9:1f:e4:e8:7c:81:17:7c:cf:71:45:7f:e1:d7:
                    b3:e2:3c:3d:08:ea:51:85:e2:48:17:21:a5:39:66:
                    bb:71:78:49:56:3e:6a:73:52:5f:8b:cc:b3:d1:dc:
                    55:cd:e3:ff:b0:a2:a7:2d:de:f2:24:2b:69:49:8e:
                    79:f3:0d:ce:3b:19:97:7d:af:9f:62:ed:72:f2:df:
                    d4:a2:06:cb:99:2a:9f:6b:40:98:ac:a8:84:c5:c2:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:60:71:D1:ED:05:19:0B:A5:24:54:03:1A:C6:3B:AA:82:B1:F1
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:f5:33:3a:3f:25:2a:58:ef:fe:f6:5a:3f:97:c9:8b:8b:
         b2:ed:cc:4e:75:af:cf:27:0d:35:c1:82:14:72:6a:ec:bd:c5:
         46:ff:6d:84:c8:55:2d:77:54:6c:f3:f6:36:14:fd:a9:dd:0a:
         5d:9e:6e:8e:9d:d1:98:fd:b6:9c:68:0a:82:92:b5:b7:1c:ee:
         38:19:ca:16:23:f5:1e:97:67:7f:ae:36:25:2c:9d:dd:ef:63:
         b9:04:f9:6f:76:c6:19:4f:16:14:32:33:b0:72:8c:65:ee:5b:
         79:3c:94:75:0a:b0:45:55:ed:13:a2:c9:e3:fa:cc:78:c8:11:
         0a:18:f7:d2:24:67:09:fc:a9:5d:e0:ed:2f:26:b9:3e:63:f7:
         5a:c1:84:a4:8f:cb:f1:30:64:5f:fd:d6:4a:1c:9e:db:b0:af:
         0a:bf:ae:7c:fe:21:29:ce:e5:fe:30:f1:c0:83:3b:b5:80:cd:
         67:ee:87:04:4a:87:a6:cc:bc:2a:59:b5:b1:6d:c9:55:e6:80:
         3b:83:ca:a2:b4:c4:32:25:f5:f1:2b:75:0b:1e:4b:fa:ad:44:
         66:1b:cf:b2:92:9e:8a:f6:1e:e0:80:7e:1c:ff:6d:3e:d3:99:
         c1:24:69:8b:81:9d:a1:0f:1f:c5:42:e2:9e:48:28:7e:2e:f3:
         90:e8:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 05:28:23 2024 by rpki-client on console-fra.rpki-client.org